CVE-2005-1224

HIGH 7.5CVE-2005-1224 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-1224 is a HIGH (CVSS 7.5) vulnerability affecting duportal (duware).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
duportal duware	`= 3.4= pro_3.4= sql_3.4`	No fix yet

Description

Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp (3) the iCat parameter to cat.asp or detail.asp, (4) the iData parameter to detail.asp or result.asp, the (5) POL_ID, (6) POL_PARENT, (7) POL_CATEGORY, (8) CHA_NAME, or (9) CHA_ID parameters to inc_vote.asp, or the (10) tfm_order or (11) tfm_orderby parameters to toppages.asp, a different set of vulnerabilities than CVE-2005-1236.

References

More vulnerabilities in duportal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free